Find 15 highly qualified candidates for a Cyber Threat Engineer position in Vienna, VA and Pensacola, FL with 5–10 years of cybersecurity experience and hybrid willingness (3 days onsite). Mandatory: 3+ years hands-on Python scripting/automation; direct CTI; hands-on threat hunting; practical YARA and SIGMA rule development; hands-on MITRE ATT&CK; and security automation, threat-intel ingestion, enrichment and integration workflows. Provide public profiles separated by location with evidence, certifications and match percentage; do not assume missing qualifications.
A live-web search reviewed 1,204 unique Northern Virginia/DC-area results and 1,104 unique Pensacola-area results, yielding 15 geographically relevant public talent leads with 5–10 years of stated or calculable cybersecurity experience — 10 in the Vienna/DC commuting pool, 5 in the Pensacola pool. The shortlist is single-sourced in the sense that it rests overwhelmingly on public LinkedIn-profile material, with one independent profile-aggregator result; employer and title details need direct candidate confirmation.
No profile is fully validated. Zero of the 15 publicly document every mandatory requirement — in particular, none documents 3+ years of Python, and SIGMA and/or practical YARA evidence is missing for many. Treat these as talent leads requiring validation, not qualified candidates. Blank fields mean “not publicly evidenced,” never “no experience.” Work authorization and onsite willingness were deliberately not screened, inferred or scored: authorization must be verified separately through a lawful, consistent employer process, and hybrid willingness is unverified for every person.
Long evidence text is shortened here; hover a shortened cell for the full public wording, or open the profile. “Not publicly evidenced” never means lack of experience.
| Profile | Title / employer | Experience | Python 3+ yrs | YARA | SIGMA | CTI | Threat hunting | MITRE ATT&CK | Automation / intel workflows | Certifications | Index (max 90) | Source |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Vienna / Northern Virginia / DC pool — 10 leads | ||||||||||||
| Chinonso Nwangwu Washington DC-Baltimore Area |
Cybersecurity Engineer AGovX LLC |
8+ years | Not publicly evidenced | Developed and operationalized custom YARA detections mapped to MITRE ATT&CK techniques | Engineered and tuned SIEM detection rules using Sigma logic | Analyzed threat actor TTPs and contributed to CISA Cybersecurity Advisories, documenting indicators and recommending defensive countermeasures | Conducted 40+ proactive threat hunts targeting advanced persistent threats as Hunt & Incident Response SME across 250+ federal networks | Mapped detections and custom hunt detections to MITRE ATT&CK techniques | Built Python and REST API integrations between security platforms to streamline investigations and improve cross-tool visibility | CompTIA Advanced Security Practitioner (CASP), CompTIA Cybersecurity Analyst (CySA+), CompTIA Security+ | 80 | linkedin.com |
| Tarik L Washington, District of Columbia, United States |
Principal Cybersecurity Analyst Northrop Grumman |
6 years (calculated from dated roles beginning February 2020 through the present, 2026) | Not publicly evidenced | YARA listed among tools and platforms he works with | Detections authored in Sigma and converted to Splunk SPL via sigma-cli in a Detection as Code pipeline | Cyber Threat Analyst role at ECS and threat analysis focus in headline | Hunts for insider threats, credential misuse, lateral movement, and data exfiltration | Engineers MITRE ATT&CK-mapped detection logic in Splunk, Microsoft Sentinel, and Elastic; ATT&CK SOC Assessment Certification from MITRE Engenuity | Automates triage workflows and SIEM content pipelines using Python, REST APIs, and SOAR integrations; built a Splunk Attack Range v5 Detection as Code… | ATT&CK® Security Operations Center Assessment Certification; Splunk Enterprise Certified Admin; Splunk Core Ce… | 80 | linkedin.com |
| Bikram S Ghura Baltimore, Maryland, United States |
Cyber Threat Intelligence Morgan Stanley |
Approximately 9 years of cybersecurity experience (cybersecurity roles from August 2017 to Present, including… | Not publicly evidenced | Researches SIEM, EDR and Yara rules for malware detection and Threat Hunting in his Cyber Threat Intelligence role at Hewlett Packard Enterprise | Not publicly evidenced | Cyber Threat Intelligence at Morgan Stanley (June 2022 – Present) and at Hewlett Packard Enterprise (August 2020 – June 2022), researching TTPs & IOCs… | Analyzed internal Email, EDR, Anti-virus, Proxy and Firewall logs to plan out Threat Hunt activities, and researched SIEM, EDR and Yara rules for malw… | Applied the MITRE ATT&CK Framework when researching TTPs & IOCs pertaining to APTs and Crimeware | Developed and maintained playbooks within the TIP/SOAR platform for enrichment (automated OSINT) and ingestion; developed scrapers with Python as a Cy… | GCTI; CISSP; Contestant - Global OSINT Search Party CTF (Trace Labs); Splunk Enterprise Security (Splunk); Aut… | 70 | linkedin.com |
| Fidelle W. Washington DC-Baltimore Area |
Cyber Security Analyst BNY Mellon |
over 5 years | Not publicly evidenced | Not publicly evidenced | Sigma rules used in proactive threat hunting and IOC development | IOC development as part of proactive threat hunting | Proactive threat hunting using behavioral analytics, IOC development, Sigma rules, and optimized Splunk and KQL queries | Mapping adversary behavior to MITRE ATT&CK techniques in SIEM investigations and threat classification | Improving security operations through automation, scripting, and advanced detection engineering | CompTIA CySA+; Certified in Cybersecurity (CC); Introduction to Data Governance and Privacy; Cybersecurity War… | 70 | linkedin.com |
| Troy Karpinsky Washington DC-Baltimore Area |
Staff CSIRT Analyst Kaseya |
over five years | Not publicly evidenced | Publicly evidenced (details on profile) | Not publicly evidenced | Publicly evidenced (details on profile) | Publicly evidenced (details on profile) | Publicly evidenced (details on profile) | Publicly evidenced (details on profile) | Chainalysis Reactor Certification (CRC); GIAC Certified Forensic Analyst (GCFA); GIAC Cyber Threat Intelligenc… | 70 | linkedin.com |
| Will H. Manassas, Virginia, United States |
Sr. Cyber Security Analyst GuidePoint Security |
10 years of cybersecurity experience (13 years of overall IT experience) | Not publicly evidenced | Suggests IDS rule tunings within YARA as part of intrusion detection work | Suggests IDS rule tunings within Sigma as part of intrusion detection work | Reviews and researches emerging threat intelligence including Indicators of Compromise, rule updates, reported APT associations, TTPs, and OSINT | Performs threat hunting on high priority events and as needed in SOC roles | Not publicly evidenced | Developed analyst SOPs and playbooks for SOAR and worked with Splunk Phantom/SOAR daily | CompTIA Cybersecurity Analyst (CySA+) | 70 | linkedin.com |
| Tasha Holloway Washington DC-Baltimore Area |
Security Researcher NerdLogic.io |
approximately 7 years of cybersecurity experience (October 2019 – Present) | Not publicly evidenced | Publicly evidenced (details on profile) | Publicly evidenced (details on profile) | Publicly evidenced (details on profile) | Not publicly evidenced | Publicly evidenced (details on profile) | Publicly evidenced (details on profile) | Top ATT&CK Techniques (AttackIQ); Certified in Cybersecurity (CC) (ISC2); Certified Ethical Hacker (CEH) (EC-C… | 70 | linkedin.com |
| A. K. Washington DC-Baltimore Area |
Cyber Threat Intelligence | Cyber Threat Hunter | National Institute of Health AZ Cyber Security Solutions |
nearly a decade | Not publicly evidenced | Not publicly evidenced | Not publicly evidenced | Current role titled Cyber Threat Intelligence at the National Institute of Health via AZ Cyber Security Solutions (2022 – Present), and Cyber Threat I… | Conducted threat hunts on an environment of 25,000+ systems, conducted daily hunt missions, led hunts auditing admin accounts and endpoints using Tani… | Planned and conducted threat hunts for multiple attack vectors regarding the MITRE ATT&CK framework and earned the Foundations of Operationalizing MIT… | Created automation strategies in accordance with the CIA triad and coordinated the implementation of new security tools onto the network | CISSP; CompTIA Security+; Foundations of Breach & Attack Simulation (AttackIQ); Foundations of Operationalizin… | 60 | linkedin.com |
| Adarsh Agarwal Washington DC-Baltimore Area |
Senior Security Engineer - Youth Safety Meta |
9+ years | Not publicly evidenced | Not publicly evidenced | Not publicly evidenced | Direct cyber threat intelligence experience — tracked emerging threats, threat actors, and zero-day vulnerabilities across surface, deep, and dark web… | Hands-on threat hunting — built threat hunting pipelines and codified ad-hoc threat hunts into repeatable detection-as-code pipelines processing 100B+… | Hands-on MITRE ATT&CK application — mapped detection coverage to MITRE ATT&CK across all surfaces and mapped threat detection, hunting, and modeling w… | Security automation — automated L1 triage through SOAR playbooks fusing open-source threat intel (MISP, AlienVault OTX, abuse.ch) with commercial feed… | AWS Certified Solutions Architect – Associate; AWS Certified Cloud Practitioner; Palo Alto Networks Certified… | 60 | linkedin.com |
| Adebayo Olusada Capitol Heights, Maryland, United States |
ITSOC/Insider Threat Analyst Coalfire |
approximately 5.5 years of professional cybersecurity experience (March 2021 – present, calculable from dated… | Not publicly evidenced | Implemented and adjusted YARA Rules in Fire Eye CM to identify and classify malware samples | Not publicly evidenced | Utilized threat intelligence tools to support daily cyber security operations producing detection, triage, analysis, mitigation, reporting, and docume… | Monitored and investigated suspicious network activities using Fire Eye HX, NX, EX, CM, ETP and Splunk, identifying 7+ anomalous events weekly for tri… | Not publicly evidenced | Wrote and maintained Splunk scripts to automate parsing of authentication logs, reducing manual triage time by 30% | Cisco Certified Network Associate Routing and Switching (CCNA); Cisco Certified Entry Networking Technician (C… | 60 | linkedin.com |
| Pensacola pool — 5 leads | ||||||||||||
| Chris C. Pensacola, Florida, United States |
Senior Cyber Security Analyst Current Company |
six years | Not publicly evidenced | Gave multiple interactive presentations on advanced YARA rule writing to support the team and increase implementation of effective countermeasures | Not publicly evidenced | Used TTPs and IOCs found through Open Source Research and High Side intelligence reports to hunt for APT activity on monitored networks; threat resear… | Provides leadership and direction for threat hunting and reconnaissance operations; used regex, awk, sed, tcpdump, and tshark to hunt for threats in n… | Not publicly evidenced | Employed automation using Linux CLI capabilities and Splunk query knowledge to build bash scripts and Splunk correlation searches intended to discover… | GCFA, GCFE, GNFA, GCIH, CySA+, SEC+, NET+, CEH, CSXP | 60 | linkedin.com |
| Jarrad Pemberton Pensacola, Florida, United States |
Senior Detection Engineer @ Target Target |
Approximately 5 years of professional cybersecurity experience (May 2021 – October 2026, calculable from dated… | Not publicly evidenced | Not publicly evidenced | Not publicly evidenced | Direct cyber threat intelligence experience: built CTI pipelines at SCYTHE, authored threat intelligence reports, and holds the arcX Foundation Level… | Hands-on threat hunting: conducted Threat Hunting activities at Bluebeam to uncover hidden threats and enhance detection and mitigation | Hands-on MITRE ATT&CK application: developed kill-chain emulations mapped to MITRE ATT&CK at SCYTHE and conducted BAS testing to address MITRE securit… | Security automation evidence: built CTI intelligence ingestion pipelines, created automated services for phishing case ingestion into SIEM, developed… | Foundation Level Threat intelligence Analyst (arcX); Practical Junior Penetration Tester (TCM Security); Conte… | 60 | getprog.ai |
| Michael Ferrarin Pensacola, Florida, United States |
SOC Cyber Incident Handler StratasCorp Technologies |
approximately 5 years (November 2021 – present, calculable from dated roles) | Not publicly evidenced | Not publicly evidenced | Not publicly evidenced | Cyber threat assessment and threat research experience (Principal Specialist, Cyber Threat Assessment at Nightwing, October 2024 – November 2025) | SOC Cyber Threat Hunter at StratasCorp Technologies (November 2025 – August 2026) | Not publicly evidenced | Exploring automation and coding, with a background in cybersecurity, systems, and networks | CompTIA Security+ (Oct 2025); C486 - ITIL Foundations (May 2021) | 50 | linkedin.com |
| Tyler Smith Pensacola Metropolitan Area |
Lead Threat Hunter Cybersecurity and Infrastructure Security Agency |
9+ years | Not publicly evidenced | Not publicly evidenced | Not publicly evidenced | Direct cyber threat intelligence experience, including intelligence-driven investigations and partnership with threat intelligence teams | Hands-on threat hunting, currently directing national-level hunt operations at CISA after prior hunting roles on a Navy Cyber Protection Team and CISA… | Not publicly evidenced | Security workflow development and modernization evidence, including authoring operational workflows and establishing hunt workflows | CompTIA Linux+ (Powered by LPI) Certification; CompTIA Network Vulnerability Assessment Professional – CNVP St… | 50 | linkedin.com |
| Ramon Villareal Pensacola, Florida, United States |
Security Operations Center Analyst II TekStream Solutions and US Navy |
8 years | Not publicly evidenced | Not publicly evidenced | Not publicly evidenced | Not publicly evidenced | Hands-on threat hunting work in defensive cyber operations, including proactive threat identification with SIEM platforms analyzing Suricata alerts, n… | Not publicly evidenced | Automating security solutions with Python and PowerShell | Splunk Core Certified Power User; CompTIA Cybersecurity Analyst (CySA+); CompTIA Security+; Certified Ethical… | 40 | linkedin.com |
Method: 15 public talent-lead rows (10 Vienna/Northern Virginia/DC, 5 Pensacola) selected from 1,204 and 1,104 unique live-web results respectively, one row per person, unique profile URLs, sources mostly LinkedIn plus one GetProg aggregator result. The evidence index counts documented coverage only: 10 points each for location fit and 5–10 years of experience, plus 10 per technical category (Python duration, YARA, SIGMA, CTI, threat hunting, MITRE ATT&CK, automation); maximum 90 because work authorization and onsite willingness are excluded by design. It is not an employment decision score. Long evidence text is preserved verbatim in the tables; two certification lists are truncated at the source.